Feeds

Cisco probes source code theft

Networking crown jewels aired in public

  • alert
  • submit to reddit

Providing a secure and efficient Helpdesk

Cisco has launched an investigation following reports that portions of its core networking operating system source code have been stolen and distributed online.

According to Russian security portal SecurityLab, a hacker boasting he broke into Cisco's internal network and nicked source code for some versions of Cisco's IOS has posted a 2.5MB snippet onto an IRC channel as proof. Around 800MB of code relating to Cisco IOS 12.3 and 12.3t has reportedly been nicked. IOS 12.3 is the latest version of Cisco's software, widely used home office, branch office and enterprise routers. IOS 12.3t is an earlier test version. Access to Cisco's source code might make it easier for hackers to develop exploits.

"Cisco is aware that a potential compromise of its proprietary information occurred and was reported on a public Web site just prior to the weekend," Cisco spokesman Jim Brady told C/Net. "The Cisco information security team is looking into this matter and investigating what happened."

The leak of proprietary source code would be embarrassing for Cisco given its increased focus on security over recent months but far from unprecedented within the industry. Source code for parts of Windows 2000 and Windows NT were leaked to the Internet back in February prompting a minor security flap. ®

Related stories

How to hack a network in nine easy steps
Cisco IOS DoS exploit released in the wild
MS Windows source code escapes onto Internet
Windows leak dangers exaggerated
Half Life 2 leak means no launch for Christmas

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Hackers thrash Bash Shellshock bug: World races to cover hole
Update your gear now to avoid early attacks hitting the web
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.